Most code health problems do not arrive in one big commit. They arrive one reasonable pull request at a time: a function that grows a little too complex, a dependency that falls behind, a change that ships without tests. By the time anyone notices, the problem is everywhere.
DebtDraft is a GitHub Action that makes that visible at the moment it matters, inside the pull request.
What it does
On every pull request and every push to your default branch, DebtDraft scores your repository on five signals:
- Code complexity
- Test coverage
- Duplication
- Outdated dependencies
- Vulnerable dependencies
The result is one score and one letter grade, posted as a single comment on the pull request. A separate section looks only at the lines the change touches, so you can see what this change did, not just the state of the whole repository.
Track it over time
A hosted dashboard shows every connected repository with its current grade and its trend. You can open a repository to see the score history, and open any scan to see which functions, files and dependencies are behind the number.
Setup
Add one step to your workflow, generate and add the API key, and commit the workflow. That's it!
Privacy
Secrets detection runs entirely on your runner, and secrets never leave it, not even to our own dashboard. Your source code is never uploaded. Privacy is not a privilege. It's a right.
Try it
DebtDraft is free for up to three repositories right now.
- Website: https://debtdraft.dev?utm_source=devto
- GitHub Marketplace: https://github.com/marketplace/actions/debtdraft
We would love to hear which signal matters most to your team!
Top comments (0)
Some comments may only be visible to logged-in visitors. Sign in to view all comments. Some comments have been hidden by the post's author - find out more